vulnerability
Ubuntu: (CVE-2022-50075): linux vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:S/C:N/I:N/A:C) | Jun 18, 2025 | Jun 26, 2025 | Apr 16, 2026 |
Description
In the Linux kernel, the following vulnerability has been resolved:
tracing/eprobes: Have event probes be consistent with kprobes and uprobes
Currently, if a symbol "@" is attempted to be used with an event probe
(eprobes), it will cause a NULL pointer dereference crash.
Both kprobes and uprobes can reference data other than the main registers.
Such as immediate address, symbols and the current task name. Have eprobes
do the same thing.
For "comm", if "comm" is used and the event being attached to does not
have the "comm" field, then make it the "$comm" that kprobes has. This is
consistent to the way histograms and filters work.
Solutions
References
- CVE-2022-50075
- https://attackerkb.com/topics/CVE-2022-50075
- CWE-476
- EUVD-EUVD-2022-55344
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-55344
- https://git.kernel.org/stable/c/47cc883f21fa3bcf24891b4b455f4cd461ce2d6e
- https://git.kernel.org/stable/c/6a832ec3d680b3a4f4fad5752672827d71bae501
- https://git.kernel.org/stable/c/b489aca082a23033a3d8355cfb0032f0e2523440
- https://www.cve.org/CVERecord?id=CVE-2022-50075
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.